Your personal data is a trust we take seriously. This Privacy Policy clearly explains how KayaGaya collects, uses, stores, and protects your personal information in accordance with Malaysia's Personal Data Protection Act (PDPA).
Our Privacy Commitment
KayaGaya ensures your data is protected at every stage — from collection to deletion.
All data transmitted between your device and KayaGaya's servers is protected by 256-bit SSL encryption. Data stored on our servers is also encrypted at the database level, ensuring no unauthorised party can access your information.
KayaGaya fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect data only for legitimate purposes, retain it for appropriate periods, and delete it when no longer required in accordance with legal guidelines.
Only authorised KayaGaya staff who require access to specific data are permitted to view it. All access is logged and audited regularly. Your password is stored in hashed form that cannot be decrypted by anyone.
Kayagaya has never and will never sell, rent, or transfer your personal data to third parties for marketing purposes. Your data belongs to you — we use it solely to enhance your gaming experience and account security.
In the event of any security incident involving your data, KayaGaya is committed to notifying you within 72 hours of the incident being detected, in accordance with international data protection best practices and Malaysia's PDPA requirements.
You have the full right to access, correct, download, or request deletion of your personal data at any time. The process is straightforward and can be initiated directly through KayaGaya's customer support team, available 24/7.
Kayagaya collects your personal information only when necessary to provide high-quality, secure, and legally compliant services in Malaysia. Below are the categories of information we collect:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identification Information | Full name, IC number, date of birth | Identity Verification & KYC |
| Contact Information | Phone number, email address | Account Communications & 2FA |
| Financial Information | Bank account number, digital wallet | Deposit & Withdrawal Processing |
| Device & Technical Data | IP address, browser type, operating system | Security & Fraud Prevention |
| Game Activity Data | Betting history, wins, and play time | Responsible Gaming & Support |
| Location Information | Country, region based on IP | Geographic & Security Compliance |
We do not collect sensitive data such as medical information, religious beliefs, or political affiliations under any circumstances. Financial data such as credit card numbers is not stored on KayaGaya's servers — payments are processed by certified and registered payment gateway providers.
Data collected by KayaGaya is used responsibly for the following purposes only. We will not use your data for any other purpose without obtaining your consent first:
Kayagaya does not sell or rent your personal data to anyone. We only share information in the following limited situations, with appropriate contractual and security safeguards in place:
KayaGaya invests seriously in cybersecurity infrastructure to ensure your personal data is always protected. The security measures we employ include:
KayaGaya uses cookies and similar tracking technologies to enhance user experience, ensure session security, and understand how our platform is used. The following are the types of cookies we use:
You can manage and delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your web browser's help documentation.
Kayagaya retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. Our data minimisation principle ensures that data no longer needed is promptly deleted or anonymised.
| Data Type | Retention Period | Reason |
|---|---|---|
| KYC & Identity Data | 5 years after account closure | Malaysia AML & PDPA Requirements |
| Financial Transaction Records | 7 years | Tax & Financial Audit Requirements |
| Game Activity Logs | 2 years | Service support & dispute resolution |
| Communication Data (Email/Chat) | 1 year | Quality assurance & complaints resolution |
| Technical & Security Logs | 90 days | Security Monitoring & Threat Detection |
Upon expiry of the retention period, your data will be permanently deleted or anonymised so that it can no longer be linked to your identity. You may also request early account deletion, subject to the mandatory retention requirements stated above.
Under Malaysia's PDPA and KayaGaya's commitment to privacy, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Update or correct your personal data that is inaccurate or out of date.
Request deletion of your personal data, subject to legal obligations.
Receive your data in a machine-readable format for portability.
Object to the processing of your data for direct marketing purposes at any time.
Request that we restrict how your data is processed under certain circumstances.
Some technology partners and cloud service providers used by KayaGaya may be located outside Malaysia. Any transfer of personal data overseas is made only to countries or organisations that provide a level of data protection equivalent to or higher than Malaysia's standards.
KayaGaya ensures all cross-border data transfers are protected through appropriate data transfer agreements, approved standard contractual clauses, and technical safeguards such as end-to-end encryption. We do not transfer data to countries without adequate data protection without appropriate additional safeguards.
The KayaGaya platform may contain links to third-party game provider or payment service websites. Our Privacy Policy applies solely to the KayaGaya platform. We have no control over the privacy practices of external websites and are not responsible for their content or privacy policies.
We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. The presence of links to external websites on the KayaGaya platform does not mean we endorse or guarantee the privacy practices of those sites.
KayaGaya reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, technology, or our operational practices. Any material changes will be communicated to you via email or a prominent notice on our website at least 14 days before the changes take effect.
The "Last Updated" date at the top of this page will always reflect the latest version of our Privacy Policy. Your continued use of the KayaGaya platform after changes take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how KayaGaya handles your personal data, please contact our Data Protection Officer (DPO). We are committed to responding within 14 business days for every inquiry received.